iwhd security

Pete Zaitcev zaitcev at redhat.com
Thu Sep 22 19:01:27 UTC 2011


On Wed, 14 Sep 2011 19:22:00 +0100
Mark McLoughlin <markmc at redhat.com> wrote:

>   4) iwhd and Image Factory would be configured to only accept 
>      connections from Conductor - e.g. using two-legged OAuth like 
>      Katello does with Candlepin and Pulp
> 
> IMHO, that would be the best option for the short term.

I have examined the 2-legged OAuth and I concur. It requires me to
do some work, so I hope you guys like it on the Conductor side and
not change your mind like it happened to the Kerberos thing. Here
is the RM task:
 https://www.aeolusproject.org/redmine/issues/2371
(includes write-up of the plan, etc.)

-- Pete


More information about the iwhd-devel mailing list